SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 8101 | canalblog.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 55 d | |
| 8102 | canaltech.com.br | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 39 d | |
| 8103 | capgemini.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 40 d | |
| 8104 | carbuzz.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 61 d | |
| 8105 | cardano.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 63 d | |
| 8106 | cbr.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 61 d | |
| 8107 | cc.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 42 d | |
| 8108 | cdu.de | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 30 d | |
| 8109 | cedars-sinai.org | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 103 d | |
| 8110 | changiairport.com | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 119 d | |
| 8111 | chaoxing.com | A+ | 98 | — | – | TLS1.3 | WoTrus RSA OV SSL CA 2 | 112 d | |
| 8112 | check24.de | A+ | 98 | — | – | TLS1.3 | ZeroSSL ECC DV SSL CA 2 | 55 d | |
| 8113 | checkdomain.de | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 46 d | |
| 8114 | chicagobooth.edu | A+ | 98 | — | – | TLS1.3 | InCommon RSA Server CA 2 | 156 d | |
| 8115 | china-briefing.com | A+ | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | 104 d | |
| 8116 | chinaz.com | A+ | 98 | — | – | TLS1.3 | WoTrus RSA DV SSL CA 2 | 97 d | |
| 8117 | chromium.org | A+ | 98 | — | – | TLS1.3 | Google Trust Services | 40 d | |
| 8118 | city-data.com | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 49 d | |
| 8119 | cityam.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 63 d | |
| 8120 | cld.bz | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 49 d | |
| 8121 | cleanenergywire.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 62 d | |
| 8122 | clevescene.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 40 d | |
| 8123 | climateactiontracker.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 75 d | |
| 8124 | clinicaltrials.gov | A+ | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | 125 d | |
| 8125 | cmt.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 54 d | |
| 8126 | codeberg.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 32 d | |
| 8127 | codeberg.page | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 8128 | cognitoforms.com | A+ | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA OV - R1v1 | 92 d | |
| 8129 | collider.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 61 d | |
| 8130 | commonsensemedia.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 53 d | |
| 8131 | computerbase.de | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 57 d | |
| 8132 | computerbild.de | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 29 d | |
| 8133 | computerworld.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 71 d | |
| 8134 | confluent.io | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 8135 | conseil-etat.fr | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 55 d | |
| 8136 | conservation.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 42 d | |
| 8137 | copilot.com | A+ | 98 | — | – | TLS1.3 | Microsoft TLS G2 RSA CA OCSP 10 | 75 d | |
| 8138 | correos.es | A+ | 98 | — | – | TLS1.3 | Google Trust Services | 73 d | |
| 8139 | coxautoinc.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 27 d | |
| 8140 | cp.pt | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA EV R36 | 78 d | |
| 8141 | cs.com.cn | A+ | 98 | — | – | TLS1.3 | cnTrus RSA OV SSL CA 2 | 196 d | |
| 8142 | csoonline.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 8143 | csr.run | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 65 d | |
| 8144 | ctan.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 87 d | |
| 8145 | dailybreeze.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 75 d | |
| 8146 | dailycamera.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 61 d | |
| 8147 | dailynews.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 52 d | |
| 8148 | dallasobserver.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 51 d | |
| 8149 | dandomain.dk | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 68 d | |
| 8150 | darktable.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 34 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.